SB20261022435 - Integer overflow in Linux kernel bluetooth driver

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB20261022435

SB20261022435 - Integer overflow in Linux kernel bluetooth driver

Published: October 22, 2026

Security Bulletin ID SB20261022435
CSH Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Local access
Highest impact Denial of service

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 vulnerability.


1) Integer overflow (CVE-ID: CVE-2026-98819)

CWE-ID: CWE-190 - Integer overflow

CVSSv4: 6.7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a local privileged user to trigger out-of-bounds reads and potentially cause a denial of service.

The vulnerability exists due to integer wraparound and insufficient record-length validation in the Linux kernel Bluetooth btintel DDC configuration parser when processing firmware records. A local privileged user can supply malformed DDC configuration data, if able to influence the firmware input, to cause record lengths to wrap or exceed the remaining firmware bytes, potentially triggering out-of-bounds reads and a denial of service.


Remediation

Install update from vendor's website.

References